Skip to content
OpenAdvisories
Critical USN-3603-1 1 CVE

paramiko vulnerability

Published Mar 20, 2018 · Updated Feb 10, 2026

Ecosystem: Ubuntu

Summary

Matthijs Kooijman discovered that Paramiko's SSH server implementation
did not properly require authentication before processing requests. An
unauthenticated remote attacker could possibly use this to execute
arbitrary code.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 14.04 LTS 14.04:LTS paramiko 1.10.1-1git1ubuntu0.1
Ubuntu · 16.04 LTS 16.04:LTS paramiko 1.16.0-1ubuntu0.1

Vulnerabilities 1

  • Critical 9.8
    CVE-2018-7750 Public exploit EPSS 27%

    Paramiko not properly checking authentication before processing other requests

    transport.py in the SSH server implementation of Paramiko before 1.17.6, 1.18.x before 1.18.5, 2.0.x before 2.0.8, 2.1.x before 2.1.5, 2.2.x before 2.2.3, 2.3.x before 2.3.2, and 2.4.x before 2.4.1 does not properly check whether authentication is completed b…

    paramiko paramiko paramiko py3-paramiko Debian Ubuntu Alpine PyPI

References

  • report
    https://ubuntu.com/security/CVE-2018-7750